Domain Password Policy & Blocking Policy Inheritance

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Fat Bastard (fbastard_at_satan.com)
Date: 09/30/04 

Date: Thu, 30 Sep 2004 21:24:07 GMT

While testing the implementation of a domain password policy it was
not working and I discovered the problem was the "Block Policy
inheritance" option was checked for the DC OU. I deply applications
using GPO and do not want these deployed to the domain controllers.

Is there a way to achieve this by being able to leave the block policy
option checked or leave it checked and use another method to prevent
it from applying to the DC's? Hopefully one that is automatic instead
of going into each App GPO, adding each DC and denying read access.

Quantcast